Configuring SSL Security for Airflow

This topic describes the security configurations for Airflow on HPE Ezmeral Data Fabric.

Airflow enables SSL by default on secure clusters and you can manually configure SSL for nonsecure clusters in HPE Ezmeral Data Fabric.

Enabling SSL on Secure Clusters

Airflow enables SSL by default on secure clusters and uses the standard Data-Fabric SSL configuration.

Enabling SSL on Nonsecure Clusters

To enable SSL on non-secure clusters, provide a certificate and a key to the webserver.

Add the following configuration options at <airflow_home>/conf/airflow.cfg.
[webserver] 

web_server_ssl_cert = <path to certificate> 

web_server_ssl_key = <path to private key> 

Once you enable the SSL, you must use https:// in the browser for secure connection.